Lucene search
+L

9 matches found

NVD
NVD
•added 2024/04/03 5:15 a.m.•43 views

CVE-2024-31011

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admintemplate.php...

9.8CVSS7.5AI score0.0123EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•21 views

CVE-2024-31011

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admintemplate.php...

8.1AI score0.0123EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/03 12:00 a.m.•98 views

CVE-2024-31011

The beescms v.4.0 Content Management System is susceptible to an arbitrary file write vulnerability located in admin_template.php . The root cause is a lack of file path isolation and a failure to verify file suffixes, which allows a remote attacker to write files to the system. This vulnerabilit...

9.8CVSS7.8AI score0.0123EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/11 12:00 a.m.•14 views

CVE-2023-39067

Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL...

7.1AI score0.00395EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/11 12:00 a.m.•3 views

CVE-2023-39067: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL...

6.1CVSS6.9AI score0.00395EPSS
SaveExploits0References2
Prion
Prion
•added 2023/04/04 3:15 p.m.•31 views

Sql injection

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

7.5CVSS9.8AI score0.01142EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/04/04 12:00 a.m.•64 views

CVE-2020-20914

CVE-2020-20914 affects San Luan PublicCMS v4.0. The issue is a SQL Injection via the sql parameter that can lead to remote code execution. Documents show a high-impact, CRITICAL vulnerability (CVSS 3.1: 9.8) with network attack vector and no user interaction required. Exploitation details or live...

9.8CVSS9.8AI score0.01142EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/10/28 12:00 a.m.•41 views

CVE-2021-35388

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...

5.5AI score0.00462EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2010/09/12 12:00 a.m.•51 views

Member Management System v 4.0 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.expinion.net/Applications/MMSoverview.asp orginal advisory:http://pridels-team.blogspot.com/2010/09/member-management-system-v-40-xss-vuln.html affected versions:v 4.0 and other versions also can be affected. Member Management...

1.5AI score
SaveExploits0
Rows per page
Query Builder